Imperva expands global Incapsula network to increase performance and speed attack mitigation
Imperva, Inc. committed to protecting business-critical data and applications in the cloud and on-premises, announced a significant expansion of its network and investment in second-generation DDoS attack mitigation technology.
The investment means faster performance for internet users and introduces an industry-leading 10-second DDoS mitigation service level agreement (SLA) to minimise business disruption in the event of a DDoS attack.
The network expansion is driven by subscriber growth along with a change in DDoS attack type, size and frequency. Research by the Imperva Incapsula security team shows that DDoS attack patterns are shifting, with a significant increase in high packet rate attacks, DDoS assaults in which the packet forwarding rate escalated to about 50 million packets per second (pps).
In Q3, Imperva saw 197 high packet rate attacks among clients, more than half of which were greater than 100 million pps. Of these, 11 were more than 200 million pps with the largest hitting 238 million pps for more than 3.5 hours.
New PoPs, increased transit capacity and peering
Imperva has expanded its Incapsula data centre footprint with the addition of points of presence (PoPs) in Delhi, Dubai, Moscow, Mumbai, Taipei and Vancouver. Six more are planned to be online by the end of the year in Bangkok, Istanbul, Jakarta, Johannesburg, Mexico City and Seoul. The addition of these new PoPs speeds up the internet experience for local users.
Network bandwidth has been expanded to 4.7 terabits per second (Tbps) through a relationship with Level 3 Communications that adds an additional 1.8 Tbps across 20 strategically located data centres. An additional 2 Tbps of transit capacity is expected to be added by the end of 2017. Imperva has also expanded direct peering relationships including one with Comcast Corporation. The network expansion and new peering relationships allow Incapsula to serve more than 90 percent of the globe with sub-second response times.
Second-generation scrubbing technology deployed in mesh network
The Incapsula global network now includes the Behemoth 2, Imperva’s second-generation DDoS mitigation device that provides DDoS scrubbing capability of 650 million packets per second and 440 gigabits per second per device. The Behemoth 2 devices are linked via the Incapsula mesh network to form a virtual DDoS scrubbing centre that can mitigate large scale attacks now and in the future. With the addition of the new PoPs and Behemoth 2, the Incapsula global network has a total DDoS packet scrubbing capacity of 65 billion pps.
Yoav cohen
Together, the additional PoP locations, expanded capacity and Behemoth 2 allow Incapsula to offer a new 10-second DDoS mitigation SLA. Other services measure DDoS mitigation response times in minutes, which can result in website slowdowns and outages. The new Incapsula DDoS SLA provides DDoS customers with an improved service level commitment to mitigate the onset of a DDoS attack in a matter of seconds.
“There is a growing sophistication in DDoS attack techniques, and Incapsula’s advanced technology provides the headroom and capacity to handle larger attacks that will inevitably occur,” said Yoav Cohen, vice president of Incapsula research and development at Imperva. “Our unique approach of strategically located PoPs, increased bandwidth, and the Behemoth 2 allows Incapsula to detect and start mitigating a DDoS attack in seconds, effectively protecting against downtime.”
Forward looking statements
This press release contains “forward-looking statements” within the meaning of the Private Securities Litigation Reform Act of 1995. These forward-looking statements include the statements about Imperva’s plans to deliver new PoPs, increased capacity and product performance in the future. They are not statements of historical fact but represent Imperva’s beliefs regarding future events, which, by their nature, are inherently uncertain and affected by factors outside Imperva’s control.
Except for Imperva’s ongoing obligation to disclose material information as required by federal securities laws, Imperva is not under any obligation (and expressly disclaims any obligation) to update or alter any projections, goals, assumptions, or other statements, whether written or oral, that may be made from time to time, whether as a result of new information, future events or otherwise.
Factors that could cause actual results to differ, possibly materially, from such forward-looking statements include the factors set forth in Imperva’s filings with the United States Securities and Exchange Commission.
Comment on this article below or via Twitter @IoTGN